CVE-2026-16104

Name of the Vulnerable Software and Affected Versions Red Hat Build of Keycloak (affected versions not specified)

Description A flaw exists in the authentication configuration endpoint of the keycloak-services component, the core engine for Red Hat Build of Keycloak identity and access management. The system fails to mask sensitive configuration values, such as reCAPTCHA secret keys, when requested by administrators with view-only permissions. This failure can result in the exposure of third-party service credentials to unauthorized personnel or through administrative logs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.